Privacy Policy
Privacy Policy
Digital Cheryl
Website: https://digitalcheryl.com
Effective Date: [Insert publication date]
Last Updated: [Insert date]
1. Introduction
Digital Cheryl (“we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit https://digitalcheryl.com, contact us, or use our services.
Digital Cheryl operates from Ontario, Canada, and provides website design and development, AI chatbots, website widgets, AI integrations, workflow automation, consulting, and training services to businesses.
This policy covers information collected through our own website and, where applicable, information processed when we provide services to our clients. The way personal information is handled in a client's systems may also be governed by that client's privacy policy and our agreement with the client.
2. Information We Collect
We may collect the following categories of personal information, depending on how you interact with us.
Information You Provide
When you contact us or submit a form, we may collect information such as your name, business name, email address, telephone number if provided, and the contents of your message.
AI Chatbot Conversations
If our website or services include an AI chatbot, we may process the questions, messages, and other information you submit through the chatbot. Please avoid submitting sensitive personal information unless it is necessary for the service and appropriate safeguards have been established.
AI chatbot conversations may be processed by third-party AI providers to generate responses.
Cookies and Website Analytics
Our website may use cookies, similar technologies, and analytics tools to understand website usage, maintain website functionality, improve performance, and identify technical issues.
The specific cookies and analytics technologies used will depend on the tools installed on the website. Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
Information Collected Automatically
When you visit our website, certain technical information may be collected by our website host or service providers. Depending on the technologies used, this may include your IP address, browser type, device information, pages visited, and general usage information.
We will update this policy if our collection practices materially change.
3. How We Use Personal Information
We may use personal information for the following purposes:
Responding to inquiries and communicating with prospective or existing clients.
Providing, maintaining, and improving our website design, AI, automation, and consulting services.
Configuring, operating, troubleshooting, and maintaining AI chatbots, integrations, and widgets.
Processing information submitted to AI tools to generate responses or complete requested tasks.
Monitoring website performance and understanding how visitors use our website.
Protecting our services against unauthorized access, fraud, misuse, and security incidents.
Meeting applicable legal, regulatory, accounting, and contractual obligations.
We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted by law or appropriate consent has been obtained.
4. AI Services and Data Handling
Digital Cheryl uses or may use third-party AI technologies to provide chatbot, automation, integration, and related services.
AI Processing
Information submitted through an AI tool may be transmitted to an AI provider for processing and response generation. The provider may process that information under its own terms, privacy policy, and applicable contractual arrangements.
The provider, service, account type, and configuration may affect how information is stored, retained, reviewed, or used. We will seek to use appropriate settings and contractual protections for the services we select.
AI Training
Digital Cheryl does not intend to use client personal information to train its own AI models.
This statement does not guarantee that every third-party AI provider excludes submitted information from model training or other uses. Those practices depend on the provider, the service, the applicable terms, and the account settings.
We will take reasonable steps to select appropriate services and configurations for the intended use.
AI-Generated Responses
AI-generated responses may be inaccurate, incomplete, or outdated. Users should independently verify important information before relying on it.
Our intended services provide information, assistance, and workflow support. They are not intended to make consequential decisions about individuals, such as decisions concerning employment, credit eligibility, or access to essential services.
Where a client's implementation involves materially different uses, additional safeguards and disclosures may be necessary.
5. Third-Party Service Providers
We may use third-party providers to support our website and services. These may include:
Supabase: An anticipated provider for database, authentication, or related application infrastructure, where used.
AI providers: Such as OpenAI or Anthropic, depending on the services selected for a particular project.
Website hosting providers: The provider for our website has not yet been finalized.
Analytics, payment, email, or other service providers: These may be used if introduced as our business develops.
Third-party providers may process personal information on our behalf or independently in accordance with their own terms and applicable arrangements.
We will seek to use providers that offer appropriate security and privacy protections. We do not control the independent privacy practices of third parties, and their use of information may be governed by separate policies and contractual terms.
This section will be updated as our providers and services are confirmed.
6. Client Websites and Chatbots
When Digital Cheryl builds or configures a website, chatbot, widget, or AI integration for a client, that service may collect information directly from the client's customers or website visitors.
Depending on the service and the agreements in place, the client may determine the purposes for which the information is collected, while Digital Cheryl may process information on the client's behalf to provide technical services.
In those circumstances, the client may be responsible for providing appropriate privacy notices, obtaining required consent, responding to privacy requests, and determining the permitted use of customer information. Digital Cheryl will handle information in accordance with applicable law and its contractual obligations.
Clients are responsible for ensuring that their instructions, data, and intended uses of our services are lawful. Additional contractual terms may be required for services that process personal or sensitive information.
7. Disclosure of Personal Information
We may disclose personal information:
To service providers that help us operate our website and deliver our services.
To AI providers when necessary to process a request or operate an AI-enabled service.
When required or authorized by applicable law, regulation, legal process, or a valid governmental request.
When reasonably necessary to protect our rights, property, systems, users, or the security of our services.
In connection with a proposed or completed business transaction, subject to applicable privacy requirements.
We do not intend to sell personal information as a business practice. We will review our practices and update this policy if our activities change or if additional disclosures are required by law.
8. International Data Transfers
Some third-party service providers may store or process information outside Canada, including in the United States or other countries.
When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and lawful access by its authorities.
The countries in which information is processed will depend on the providers, services, and configurations used. We will take reasonable steps to understand relevant data-processing arrangements and implement safeguards required by applicable law.
9. Cookies and Tracking Technologies
Cookies and similar technologies may be used to support website functionality, understand traffic, and improve our services.
Some cookies may be necessary for the website to operate. Others, such as certain analytics or advertising cookies, may require consent depending on the applicable law and how they are used.
You may be able to manage cookies through your browser settings or any consent tool made available on the website. Blocking certain cookies may affect website functionality.
The specific cookies, analytics tools, and tracking technologies used will be identified more precisely as our website configuration is finalized.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, meeting legal obligations, resolving disputes, and enforcing agreements.
The appropriate retention period depends on the type of information, the service involved, applicable legal requirements, and contractual arrangements.
Where we process information on behalf of a client, retention and deletion will also depend on our agreement with that client and any applicable legal obligations.
When information is no longer required, we will take reasonable steps to delete it, securely dispose of it, or de-identify it, subject to applicable law and legitimate retention requirements.
11. Security
We take reasonable steps to protect personal information against loss, unauthorized access, disclosure, alteration, and misuse.
Our intended safeguards include password-protected accounts, access controls, and security features provided by the services we use. Additional safeguards may be implemented as our systems and services develop.
No method of transmitting or storing information is completely secure. We cannot guarantee absolute security, but we will take reasonable measures appropriate to the nature of the information and the risks involved.
Where required by applicable law, we will respond to privacy and security incidents and provide notifications to affected individuals or authorities.
12. Your Privacy Rights
Depending on the applicable law and the circumstances, you may have the right to:
Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information, subject to legal and contractual exceptions.
Withdraw consent where processing relies on consent.
Object to or restrict certain processing where applicable.
Opt out of marketing communications.
Exercise other privacy rights available under applicable law.
We may need to verify your identity before processing a request. We will respond to requests in accordance with applicable legal requirements.
If we process your information on behalf of one of our clients, we may refer your request to the relevant client or assist that client in responding, as appropriate.
To submit a privacy request, use the contact information provided at the end of this policy once it has been established.
13. Marketing Communications
If we send marketing communications, you may opt out by following the unsubscribe instructions included in the communication or by contacting us through our designated business contact channel.
We will process marketing opt-out requests in accordance with applicable law. Opting out of marketing will not prevent us from sending essential service-related or legally required communications.
14. Children's Privacy
Our services are intended primarily for businesses and adults. We do not knowingly seek to collect personal information directly from children through our business website.
If we become aware that we have collected a child's personal information in circumstances where collection was not appropriate, we will take reasonable steps to address the situation in accordance with applicable law.
Clients who deploy our AI services are responsible for considering whether their particular audience includes children and for implementing appropriate safeguards.
15. Third-Party Websites and Services
Our website or services may contain links to third-party websites, applications, or services. Those third parties operate under their own privacy policies and practices.
We are not responsible for the privacy practices of third-party websites or services that we do not control. We encourage users to review the applicable privacy information before providing personal information to those providers.
16. Changes to This Privacy Policy
We may update this Privacy Policy as our services, technology, business practices, or legal obligations change.
The updated version will be published on our website with a revised “Last Updated” date. Where required by law, we will provide notice or obtain consent before making material changes to how personal information is collected, used, or disclosed.
17. Contact Us About Privacy
If you have questions about this Privacy Policy, wish to exercise a privacy right, or have a concern about how personal information is handled, please contact:
Business: Digital Cheryl
Website: https://digitalcheryl.com
Privacy email: [Insert dedicated business privacy email address]
We will review privacy inquiries and respond in accordance with applicable law.
A business privacy email address should be established and inserted here before this policy is published. A public personal phone number or home street address has not been included.